IBM Cloud services that generate Activity Tracker events
IBM Cloud services that use Activity Tracker to monitor user-initiated activities that change the state of any of the following services in the IBM Cloud.
As of 28 March 2024 the IBM Log Analysis and IBM Cloud Activity Tracker services are deprecated and will no longer be supported as of 30 March 2025. Customers will need to migrate to IBM Cloud Logs, which replaces these two services, prior to 30 March 2025. For information about IBM Cloud Logs, see the IBM Cloud Logs documentation.
Activity Tracker hosted event search routes location-based auditing events to an Activity Tracker instance in the region where they are generated and routes global auditing events to the Activity Tracker instance that is provisioned in Frankfurt.
Analytics services
The following table lists analytics services that send auditing events:
| Service | CRN service name | Activity Tracker hosted event search offering | Events |
|---|---|---|---|
| IBM® Analytics Engine | ibmanalyticsengine |
 |
Location-based events |
| IBM Cloud® Data Engine | sql-query |
|
Location-based events |
| IBM Planning Analytics® as a Service | planning-analytics |
|
Location-based events |
| Watson Query | data-virtualization |
|
Location-based events |
| Data Product Hub | data-product-hub |
|
Location-based events |
Classic services
The following table lists services that send auditing events:
| Service | CRN service name | Activity Tracker hosted event search offering | Events |
|---|---|---|---|
| IBM Cloud® Virtual Servers (Classic) | audit-log |
|
Location-based events |
| IBM Cloud® Bare Metal Servers (Classic) | audit-log |
|
Location-based events |
Compute serverless services
The following table lists serverless compute services that send auditing events:
| Service | CRN service name | Activity Tracker hosted event search offering | Events |
|---|---|---|---|
| IBM Cloud® Code Engine | codeengine |
|
Location-based events |
Container services
The following table lists container platform services that send auditing events:
| Service | CRN service name | Activity Tracker hosted event search offering | Events |
|---|---|---|---|
| IBM Cloud® Container Registry | container-registry |
|
Location-based events |
| IBM Cloud® Kubernetes Service | containers-kubernetes |
|
Location-based events |
| Red Hat® OpenShift® on IBM Cloud® | openshift |
|
Location-based events |
| IBM Cloud Satellite® | satellite |
|
Location-based events |
Database services
The following table lists database services that send auditing events:
| Service | CRN service name | Activity Tracker hosted event search offering | Events |
|---|---|---|---|
| IBM® Cloudant® for IBM Cloud® | cloudantnosqldb |
|
Location-based events |
| IBM Cloud® Databases for EnterpriseDB | databases-for-enterprisedb-group |
|
Location-based events |
| IBM Cloud® Databases for PostgreSQL | databases-for-postgresql |
|
Location-based events |
| IBM Cloud Databases for Redis | databases-for-redis-group |
|
Location-based events |
| IBM Cloud Databases for etcd | databases-for-etcd-group |
|
Location-based events |
| IBM Cloud Databases for Elasticsearch | databases-for-elasticsearch-group |
|
Location-based events |
| IBM Cloud® Messages for RabbitMQ | messages-for-rabbitmq-group |
|
Location-based events |
| IBM Cloud Databases for MongoDB | databases-for-mongodb-group |
|
Location-based events |
| IBM Cloud® Databases for MySQL | databases-for-mysql-group |
|
Location-based events |
| IBM® Db2® on Cloud | db2oncloud |
|
Location-based events |
| IBM Db2 Warehouse on Cloud | dashdb |
[*] |
Global events |
[*] - Events provided by the BSS service.
Developer tools
The following table lists developer tools and DevOps services that send auditing events:
| Service | CRN service name | Activity Tracker hosted event search offering | Events |
|---|---|---|---|
| IBM Cloud® Schematics | schematics |
|
Location-based events |
| Apps | developer-experience |
|
Location-based events |
| IBM® Cloud Shell | cloudshell |
|
Location-based events |
| IBM Cloud® Event Notifications | event-notifications |
|
Location-based events |
| IBM Cloud® App Configuration | apprapp |
|
Location-based events |
The following table lists IBM Cloud® Continuous Delivery services that send auditing events:
| Service | CRN service name | Activity Tracker hosted event search offering | Events |
|---|---|---|---|
| IBM Cloud® Continuous Delivery | continuous-delivery |
|
Location-based events |
| Toolchain | toolchain |
|
Location-based events |
Integration services
The following table lists integration services that send auditing events:
| Service | CRN service name | Activity Tracker hosted event search offering | Events |
|---|---|---|---|
| IBM® Event Streams for IBM Cloud® | event-streams |
|
Location-based events |
| MQ on IBM Cloud | mqcloud |
|
Location-based events |
| IBM® API Connect | apiconnect |
|
Location-based events |
Network services
The following table lists network services that send auditing events:
| Service | CRN service name | Activity Tracker hosted event search offering | Events |
|---|---|---|---|
| IBM Cloud® Direct Link solution | directlink.dedicated |
|
Global events |
| IBM Cloud® Transit Gateway | transit |
|
Global events |
| IBM Cloud® DNS Services | dns-svcs |
|
Global events |
| IBM Cloud® Internet Services (CIS) | internet-svcs |
|
Global events |
| Content Delivery Network | cdn-powered-by-akamai |
|
Global events |
Observability services
The following table lists observability services that send auditing events:
| Service | CRN service name | Activity Tracker hosted event search offering | Events |
|---|---|---|---|
| IBM Cloud® Activity Tracker hosted event search offering | logdnaat |
|
Location-based events |
| IBM Cloud® Activity Tracker Event Routing | atracker |
|
Location-based events. |
| IBM® Log Analysis | logdna |
|
Location-based events |
| IBM Cloud® Monitoring | sysdig-monitor |
|
Location-based events |
| IBM Cloud Metrics Routing | metrics-router |
|
Location-based events |
Platform services
The following table lists platform services that send auditing events:
| Service | CRN service name | Activity Tracker hosted event search offering | Events |
|---|---|---|---|
| Billing | billing |
|
Global events |
| User management | user-management |
|
Global events |
| Provisioning | provisioning |
|
Global events |
| IBM Cloud® Identity and Access Management | iam-identityiam-groupsiam-am |
|
Global events |
| IBM Cloud® Security and Compliance Center | compliancesecurity-advisor |
|
Global events |
| Global Search Service | global-search-tagging |
|
Global events |
| Catalog Management | globalcatalog-collection |
|
Global events |
| Software instances | globalcatalog-instance |
|
Global events |
| Context-based restrictions | context-based-restrictions |
|
Global events |
| Projects | project |
|
Global events |
For example, the following table lists core security actions that send events to IBM Cloud Activity Tracker:
| Service | Activity Tracker hosted event search offering | Events |
|---|---|---|
| Managing access groups | |
Events that are generated when you manage access groups |
| Managing policies | |
Events that are generated when you manage IAM policies |
| Log in to the IBM Cloud | |
Events that are generated when a user or app logs in to the IBM Cloud |
| Managing platform API keys | |
Events that are generated when you manage Platform API keys |
| Managing service IDs | |
Events that are generated when you manage service IDs |
Security services
The following table lists security Cloud services that send auditing events:
| Service | CRN service name | Activity Tracker hosted event search offering | Events |
|---|---|---|---|
| IBM Cloud® App ID | appid |
|
Location-based events |
| IBM® Key Protect | kms |
|
Location-based events |
| IBM Cloud Hyper Protect Crypto Services | hs-crypto |
|
Location-based events |
| IBM Cloud® Secrets Manager | secrets-manager |
|
Location-based events |
Storage services
The following table lists storage services that send auditing events:
| Service | CRN service name | Activity Tracker hosted event search offering | Events |
|---|---|---|---|
| IBM Cloud® Object Storage | cloud-object-storage |
|
Global and location-based events [*] |
[*] IBM Cloud Object Storage (COS) generates global, and location-based events.
- By default, bucket management events such as the creation of a bucket are collected automatically.
- Collection of data events in your account is optional. You must configure each bucket to enable data events by selecting the option Track data events.
VMware Solutions
With IBM Cloud for VMware Solutions, you can quickly and seamlessly integrate or migrate your on-premises VMware workloads to the IBM Cloud by using the scalable, secure, and high-performance IBM Cloud infrastructure and the industry-leading VMware hybrid virtualization technology. You can easily deploy your VMware virtual environments and manage the infrastructure resources on IBM Cloud. At the same time, you can still use your familiar native VMware product console to manage the VMware workloads. Learn more.
The following table lists VMware solution services that send auditing events:
| Service | CRN service name | Activity Tracker hosted event search offering | Events |
|---|---|---|---|
| IBM Cloud for VMware Solutions | vmware-solutions |
|
Global events |
| IBM Cloud® for VMware® Solutions Shared | vmware-solutions |
|
Location-based events |
| KMIP for VMware | vmware-solutions |
|
Location-based events |
VPC services
You can provision a Virtual Private Cloud (VPC) in the IBM Cloud to run an isolated environment within the public cloud. VPC gives you the security of a private cloud, with the agility and ease of a public cloud. See IBM Cloud® Virtual Private Cloud Gen 2.
The following table lists VPC infrastructure services that send auditing events:
| Service | Service name | Activity Tracker hosted event search offering | Events |
|---|---|---|---|
| VPC | is |
|
Location-based events |
| Load Balancer | is.load-balancer |
|
Location-based events |
| VPN | is.vpn |
|
Location-based events |
| Client VPN | is.vpn-server |
|
Location-based events |
Watson AI
The following table lists Watson AI services that send auditing events:
| Service | CRN service name | Activity Tracker hosted event search offering | Events |
|---|---|---|---|
| IBM® watsonx™ Assistant | conversation |
|
Location-based events |
| IBM Watson® Discovery | discovery |
|
Location-based events |
| IBM Watson® Studio | data-science-experience |
|
Location-based events |
| IBM Watson™ Knowledge Catalog | datacatalog |
|
Location-based events |
| IBM Watson® Knowledge Studio | knowledge-studio |
|
Location-based events |
| IBM Watson® Language Translator | language-translator |
|
Location-based events |
| IBM Watson® Machine Learning | pm-20 |
|
Location-based events |
| IBM Watson® Natural Language Understanding | natural-language-understanding |
|
Location-based events |
| IBM Watson® Speech to Text | speech-to-text |
|
Location-based events |
| IBM Watson® Text to Speech | text-to-speech |
|
Location-based events |
Power IaaS services
Power Systems Virtual Server (PowerVS) projects deliver flexible compute capacity for Power Systems workloads. Integrated with the IBM Cloud platform for on-demand provisioning, this offering provides a secure and scalable server virtualization environment that is built upon the advanced RAS features and leading performance of the Power Systems™ platform. See IBM® Power® Virtual Server.
The following table lists Power IaaS infrastructure services that send auditing events:
| Service | Service name | Activity Tracker hosted event search offering | Events |
|---|---|---|---|
| Power Virtual Server | power-iaas |
|
Location-based events |
| SSHKeys | pcloud.ssh-key |
|
Location-based events |